General
- Target 2026-11-01_a3f33ae0979ea5a415f049dcf1eea370_elex_rhadamanthys_smoke-loader
- Size 284KB
- Sample261102-p46mxact2k
- SHA256 18e8551751642bbd1835fb2cb571a7260f15a99afd59e21ad217fb5bb8b3a431
- MD5 a3f33ae0979ea5a415f049dcf1eea370
- SHA1 0095b5dcc3cada543c5f41a5df64521109ee9fdc
- SHA512 b56ce17ce3f9fe8b4fa49289a6e9c651b801c0e1ee8f53cc9211254aadc4639808c4eac41d2738372050797c104966fcb2f2b561cd8ddf05021f4afc4015e218
- SSDEEP 6144:yFlKgzelZNQSBQGH/CSpWqTOoAXjiU4bzt:VfBQGH6SfaoAX+U4d
- TLSH T1375402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13884BA6661
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
2026-11-01_a3f33ae0979ea5a415f049dcf1eea370_elex_rhadamanthys_smoke-loader.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-11-01_a3f33ae0979ea5a415f049dcf1eea370_elex_rhadamanthys_smoke-loader
- Size 284KB
- SHA256 18e8551751642bbd1835fb2cb571a7260f15a99afd59e21ad217fb5bb8b3a431
- MD5 a3f33ae0979ea5a415f049dcf1eea370
- SHA1 0095b5dcc3cada543c5f41a5df64521109ee9fdc
- SHA512 b56ce17ce3f9fe8b4fa49289a6e9c651b801c0e1ee8f53cc9211254aadc4639808c4eac41d2738372050797c104966fcb2f2b561cd8ddf05021f4afc4015e218
- SSDEEP 6144:yFlKgzelZNQSBQGH/CSpWqTOoAXjiU4bzt:VfBQGH6SfaoAX+U4d
- TLSH T1375402457D93C4B3D0414D3188E68BE18B7F6C137AA6E11BFB9D0B4B1EB13884BA6661
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects Cosmu payload
Cosmu is a worm written in C++.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.